starting to add passport for auth protocol, further testing needed so  /login is commented out, Pauls still works tho